Medium severityNVD Advisory· Published Sep 15, 2025· Updated Aug 8, 2026

CVE-2025-6947

Description

A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the SIP Proxy configuration. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox management interface of another management user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WatchGuard/Fireboxllm-fuzzy

Patches

Vulnerability mechanics

References

psirt.watchguard.com/CVE-2025-6947nvd
www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00012nvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000